During an audit I came across these settings:
a) SE06, System change option: "All objects can be changed with Workbench Organizer"
b) SCC4, Client-independent object changes: "No changes to Repository and client-independent custom.obj."
I have been told that option a) should not be a problem because option b) will not allow changes to client-independent tables. Is this correct? I have difficulties finding an answer. In fact, I am looking for the consequences of the possible settings of these options.
That's correct. The setting "No changes to Repository and client-independent custom obj." does not allow any client independent modifications. This setting is suitable for production systems.
However, these two settings (system change option via SE06 or SE03 and client change options via SCC4) should be set as best as possible. Depending on the type of change someone attempts to the system, he/she will get an error denying the changes if both 'doors' have not been opened in the system.
In a production server it is highly recommended to set the System Change Options to NOT modifiable and the Client Change Option to allow NO changes for the repository.
By the way, client administration is covered in my book "SAP Basis Administration ... A Step-by-Step Guide to Practical Daily Tasks and Activities", chapter 5. Order it at http://www.giovannidavila.com/sapbasis
Dig Deeper on SAP Basis
Related Q&A from Giovanni Davila
Learn how to transfer a client from one server to another in this administration tip from Basis guru Giovanni Davila. Continue Reading
Giovanni Davila, Basis expert, provides advice on how to copy all SAP users from one system to another in this tip. Continue Reading
Describes how to run transaction SU01 to verify if CUA is used on an SAP system. Continue Reading